CyberCognize Privacy Policy
Last updated: 21 October 2026
CyberCognize Pty Ltd (“CyberCognize”, “we”, “us” or “our”) respects your privacy and is committed to handling personal information responsibly, transparently and securely.
This Privacy Policy explains how we collect, use, disclose, store and otherwise process personal information when you visit our website, purchase or enquire about our products and services, participate in training, create or use an account, use CyberCognize applications, communicate with us, use CyberCognize learner-support services, or otherwise interact with CyberCognize.
Our website and online store use third-party website, e-commerce, payment and technology service providers to support the purchase and delivery of our products and services.
This Privacy Policy should be read together with our Terms of Service and Return, Refund and Cancellation Policy.
1. About CyberCognize
CyberCognize Pty Ltd is an Australian professional training business providing training and certification-related products and services in areas including artificial intelligence, cybersecurity, information security and related professional disciplines.
CyberCognize may provide products and services developed, owned, administered, hosted or delivered by third-party training, certification, examination or learning providers.
For this Privacy Policy, a “Third-Party Training Provider” or “Provider” means an organisation whose courses, training materials, examinations, certifications, learning platforms or related services are authorised for sale, promotion, facilitation or delivery by CyberCognize.
2. Personal Information We Collect
The personal information we collect depends on how you interact with CyberCognize and the products or services you use.
We may collect information including:
your name;
email address;
telephone number;
residential, business or billing address;
organisation or employer;
job title or professional information where relevant;
account information and preferences;
course and training selections;
delivery-method selections;
learner and enrolment information;
training participation information;
examination or certification-related information where necessary;
order and transaction information;
billing and payment-related information;
refund or cancellation information;
communications with CyberCognize;
enquiries and support requests;
marketing preferences;
IP address;
browser and device information;
website interaction and usage information; and
other information you voluntarily provide to us.
We only seek to collect information reasonably necessary for our business activities, products and services.
3. Payment Information
Payments made through the CyberCognize online store are processed using payment-processing services available through our ecommerce platform.
Payment processors may collect and process payment-card, financial-account, transaction and authentication information required to process your payment.
CyberCognize does not ordinarily receive or store complete payment-card details where those details are processed directly by an authorised payment provider.
Purchases of CyberCognize mobile applications made through third-party application marketplaces, including the Apple App Store and Google Play, are processed according to the relevant marketplace's payment arrangements and privacy practices.
4. How We Collect Personal Information
We may collect personal information:
Directly from you, including when you:
place an order;
register for training;
create an account;
submit an enquiry;
request a quotation;
request a refund or cancellation;
participate in training;
subscribe to marketing communications; or
contact CyberCognize.
Automatically, including through:
our website and ecommerce platform;
cookies;
browser technologies;
analytics tools; and
similar technologies.
From Providers and service providers, where necessary to administer training, enrolments, examinations, certifications, support, payments or related services.
From organisations purchasing training on your behalf, such as an employer, government agency or corporate customer.
5. How We Use Personal Information
CyberCognize may use personal information to:
process purchases and payments;
create and manage customer accounts;
process course enrolments;
provide training products and services;
provision Self-Study or E-Learning access;
register learners with Providers;
arrange Virtual Classroom or Instructor-Led Classroom training;
manage Private Training and group bookings;
administer training participation;
arrange examination or certification-related services;
provide learner-support services;
provide customer service and technical support;
communicate important information about orders, courses or training;
process cancellations, transfers and refunds;
issue invoices and maintain accounting records;
manage corporate and government customers;
improve our products, services and website;
conduct security and fraud prevention activities;
comply with contractual, legal, regulatory and taxation requirements;
protect CyberCognize, our customers and Providers from misuse or unlawful activity; and
send marketing communications where permitted and in accordance with your communication preferences.
We may also use information where otherwise authorised or required by applicable law.
6. Learner Information and Third-Party Training Providers
Certain training products and services require CyberCognize to provide learner information to a Third-Party Training Provider.
Depending on the service purchased, this may be necessary to:
register you as a learner;
create a Provider account;
provision course materials;
activate digital learning access;
register training participation;
administer examinations;
administer certification or certificate programmes;
provide learner or technical support;
confirm completion or delivery of training; or
meet Provider, accreditation or regulatory requirements.
The information disclosed will depend on the Provider and service concerned and may include your name, contact information, course details, enrolment information and other information reasonably required to provide the service.
CyberCognize will handle and transfer participant information in accordance with applicable privacy and data-protection requirements.
Providers handle information in accordance with their own applicable privacy policies, contractual obligations and legal requirements.
7. Website and Ecommerce Service Providers
CyberCognize uses third-party website, ecommerce and technology service providers to operate our website and online store.
These providers may collect and process personal information relating to your access to and use of our website, customer account, online store and checkout in order to provide their services to CyberCognize and our customers.
Information submitted through our website or store may be transmitted to service providers involved in areas such as website hosting, ecommerce, payments, fraud prevention, security, analytics, communications and customer experience.
Some of these providers may process or store information outside Australia.
These service providers handle personal information in accordance with their own applicable privacy policies, contractual obligations and legal requirements.
8. Other Service Providers
CyberCognize may disclose personal information to organisations that provide services necessary to operate our business.
These may include:
ecommerce providers;
payment processors;
banks and financial institutions;
Third-Party Training Providers;
learning-platform providers;
examination and certification organisations;
cloud and hosting providers;
email and communications providers;
customer-support systems;
accounting and financial-service providers;
professional advisers;
analytics providers;
marketing service providers; and
security and fraud-prevention providers.
We seek to disclose only the information reasonably required for the relevant service.
9. Corporate, Group and Government Training
Where an organisation purchases or arranges training on behalf of learners, CyberCognize may receive learner information from that organisation.
We may also provide appropriate training-related information back to the purchasing organisation where necessary to administer the engagement and where permitted by law.
This may include information such as:
enrolment status;
attendance;
course completion; or
administrative information relating to the purchased training.
CyberCognize will not disclose examination results, certification information or other learner information to an employer or other organisation unless such disclosure is authorised, reasonably expected in the context of the engagement, required to provide the service or otherwise permitted or required by law.
10. Marketing Communications
Where permitted, CyberCognize may use your contact information to send information about:
courses;
new training products;
events;
promotions;
discounts;
professional-development opportunities; and
CyberCognize services.
You may unsubscribe from marketing emails using the unsubscribe mechanism provided in the communication.
Opting out of marketing communications does not prevent CyberCognize from sending operational communications relating to an existing order, account, enrolment, training session, payment, refund or other service.
11. Cookies, Analytics and Online Technologies
CyberCognize and our website, ecommerce and technology service providers may use cookies and similar technologies to:
operate our website;
maintain sessions;
remember preferences;
support checkout;
improve website functionality;
understand website usage;
provide security and fraud prevention;
measure performance; and
support advertising or marketing functionality where enabled.
Additional choices may be available through CyberCognize's cookie banner, privacy settings or the privacy controls provided by relevant service providers, depending on your location.
12. Personalised Advertising and Online Services
Where relevant functionality is enabled, CyberCognize or its service providers may process information about website interactions to support personalised experiences, analytics, advertising or marketing functionality.
Where required by applicable law, CyberCognize will provide appropriate notices, consent mechanisms or privacy choices relating to these activities.
Customers may also have privacy choices available directly through relevant third-party technology, advertising or ecommerce service providers.
12A. Study Journal Mobile Application
About Study Journal
Study Journal is a general-purpose learning and study organisation application developed by CyberCognize Pty Ltd and available for supported mobile devices.
The application allows users to create Study Journeys, manage learning goals, record Study Notes, capture personal takeaways, practise active recall and manage a Revisit Queue.
Local Storage and Offline Functionality
Study Journal is designed as a local-first, offline-capable application.
Study Journeys, Study Notes, learning goals, takeaways, recall outcomes and associated progress records are stored locally on the user's device.
Study Journal does not require a CyberCognize account or sign-in. The application does not require a CyberCognize-operated cloud synchronisation service or backend to store learning records.
CyberCognize does not automatically receive copies of users' Study Notes, takeaways or recall records through the application's ordinary local-storage functionality.
Microphone Dictation and Audio Features
Study Journal provides optional microphone dictation and text-to-speech functionality using supported device and operating-system capabilities.
Where a user chooses to use microphone dictation, the application may request microphone and speech-recognition permissions as required by the operating system.
Audio and speech-recognition processing may involve services provided by the device manufacturer or operating-system provider, depending on the user's device, operating-system configuration and applicable permissions.
Such processing may be subject to the relevant platform provider's privacy practices.
CyberCognize does not operate a separate speech-recognition server for Study Journal.
Users can choose to enter their Study Notes manually without using microphone dictation.
Backup and Restore
Study Journal provides user-initiated JSON backup and restore functionality.
Users control whether to export a backup and where to save or share the exported file.
Backup files may contain the learner's Study Journeys, Study Notes, takeaways, recall records and other application data.
If a user chooses to store or share a backup using a cloud-storage service, file-sharing application or other third-party provider, that provider's privacy and security practices may apply.
Users are responsible for protecting exported backup files and avoiding unauthorised disclosure of their learning records.
Application Data and Deletion
Users can manage their learning records using the application's available editing and deletion functions.
Uninstalling Study Journal generally removes application data stored within the application's local storage, subject to operating-system behaviour and any separate backups or copies retained by the user.
Deleting information from the application does not automatically delete previously exported backup files, copies stored in external locations or information independently processed by platform providers.
App Store Purchases and Platform Services
Study Journal may be distributed through third-party application marketplaces, including the Apple App Store and Google Play.
App-store operators may process purchase, payment, device, diagnostic and other information according to their own policies and applicable platform settings.
CyberCognize does not receive complete payment-card information processed directly by those marketplace operators.
Customer Support
If a user contacts CyberCognize for assistance with Study Journal, we may collect and process the information voluntarily provided in the support request, including contact details, descriptions of technical issues and any screenshots or files submitted.
Users should avoid sending sensitive Study Notes, confidential information or complete backup files unless necessary and appropriate for a particular support request.
Support enquiries may be directed to support@cybercognize.com.
Changes to Mobile Application Functionality
If Study Journal's functionality or data-processing practices materially change, CyberCognize may update this Privacy Policy and any applicable app-store privacy disclosures to reflect those changes.
12B. CyberCognize Navigator
About CyberCognize Navigator
CyberCognize Navigator is a framework self-assessment and implementation-tracking tool developed by CyberCognize Pty Ltd.
The application allows users to record assessment statuses, implementation notes, evidence references and assessment comments, review progress, and generate reports. The 42001 edition supports self-assessment against ISO/IEC 42001.
Local Storage and Offline Functionality
Navigator stores assessment names, statuses, notes, evidence references, history and associated records locally on the user’s device or within the browser or extension environment being used.
The current application does not require a CyberCognize account or sign-in. It does not automatically upload assessment records to CyberCognize or synchronise them between devices.
Separate installations, browsers and browser profiles may hold separate assessment records. CyberCognize cannot access or recover local assessment records it has not received.
Advertising, Analytics and Marketing
The current packaged Navigator application does not include advertising, analytics tracking or an email-registration requirement.
Visiting the CyberCognize website, contacting support or separately subscribing to training information may involve personal information handling described elsewhere in this Privacy Policy. Using Navigator does not itself subscribe the user to marketing communications.
Reports, Backup and Restore
Navigator generates PDF and Excel reports and provides user-initiated JSON backup and restore functionality.
Reports and backups may contain personal, confidential or organisational information entered by the user, including assessment names, notes and evidence references.
Users choose whether to export files and where to save or share them. If a user selects iCloud, another cloud-storage provider, email or a file-sharing service, the exported information may leave the device and be handled under that service’s privacy and security practices.
Users should protect exported files and keep independent backups. PDF and Excel reports cannot be restored as Navigator assessments.
Application Data and Removal
Clearing browser or application storage, removing a browser profile or extension, or uninstalling the application may remove locally stored assessments, depending on the platform and its settings.
Removing local assessment data does not automatically remove previously exported reports, backups, externally stored copies or operating-system backups.
Device Backups and Platform Services
Operating-system backups, application marketplaces and device services may process application data, device information or diagnostics according to the user’s settings and the relevant provider’s privacy practices.
Web and Browser Editions
The web edition requests application files and updates from its hosting service. Those requests may involve technical information such as IP addresses, browser information and request logs.
Visiting a hosted application or public support page is separate from the application’s local assessment-storage functionality. Relevant website, hosting and cookie practices are described elsewhere in this Privacy Policy.
Customer Support
If a user contacts CyberCognize for Navigator support, we receive the contact details, issue description and any screenshots or files voluntarily supplied.
Users should avoid sending confidential assessment information, personal information about others or complete backup files unless necessary and an appropriate method has been agreed with support.
Technical support: support@cybercognize.com.
Privacy enquiries and requests: privacy@cybercognize.com.
Changes to Navigator
If Navigator’s functionality or information-handling practices materially change, CyberCognize will update this Privacy Policy and applicable marketplace disclosures to reflect those changes.
13. Disclosure Required by Law
CyberCognize may disclose personal information where reasonably necessary to:
comply with applicable law;
respond to lawful government, regulatory or law-enforcement requests;
comply with court orders or legal proceedings;
enforce our Terms of Service;
investigate suspected fraud or misconduct;
protect CyberCognize's legal rights;
protect customers or other individuals; or
address security incidents.
14. Overseas Disclosure and International Processing
CyberCognize operates in Australia but uses organisations and Providers that may operate or process information outside Australia.
Personal information may therefore be disclosed, stored or processed outside Australia, including by Third-Party Training Providers and technology or service providers involved in delivering CyberCognize products and services. Where practicable and required by applicable law, CyberCognize will identify material overseas recipient locations in this Privacy Policy.
The countries involved may change as CyberCognize adds or changes Providers, technology services or international operations. Where practicable, we will update this Privacy Policy to identify material overseas recipient locations.
15. Security
CyberCognize takes reasonable measures designed to protect personal information from misuse, interference, loss, unauthorised access, modification or disclosure.
These measures may include appropriate administrative, technical and organisational safeguards.
However, no internet transmission, electronic system or storage technology can guarantee absolute security.
Customers should take reasonable steps to protect their own login credentials and should avoid sending sensitive or confidential information through insecure communication channels.
16. Data Retention
CyberCognize retains personal information for as long as reasonably necessary for purposes including:
providing purchased products and services;
maintaining customer or learner accounts;
administering training;
providing learner support;
maintaining financial and taxation records;
resolving disputes;
complying with legal and regulatory requirements;
meeting contractual obligations; and
protecting our legitimate legal interests.
Retention periods may differ depending on the type of information and the reason it was collected.
Information that is no longer reasonably required will be deleted, de-identified or otherwise handled in accordance with applicable requirements where appropriate.
17. Access and Correction
Depending on applicable law, you may be entitled to request access to personal information CyberCognize holds about you or ask us to correct information that is inaccurate, incomplete or out of date.
Requests can be submitted to:
We may need to verify your identity before processing a request.
In certain circumstances, applicable law may permit or require us to decline a request. Where appropriate, we will explain the reason.
18. Deletion and Other Privacy Requests
Depending on where you reside and the laws applicable to you, you may have additional rights relating to your personal information, including rights to:
request deletion;
object to certain processing;
restrict certain processing;
request data portability;
withdraw consent where processing relies on consent; or
opt out of certain targeted advertising or data-sharing activities.
These rights are not absolute and may be subject to legal exceptions, record-retention obligations and other requirements.
Requests may be submitted to:
Where a request relates to personal information processed independently by a third-party service provider for that provider's own purposes, you may also need to exercise your rights directly with that provider using its applicable privacy controls or contact process.
19. Children's Privacy
CyberCognize's professional training services are generally intended for adults and professional learners.
We do not knowingly seek to collect personal information from children for purposes unrelated to a legitimate training enrolment.
Where training involving a minor is permitted, additional consent or authorisation may be required depending on the circumstances and applicable law.
If you believe that personal information relating to a child has been provided to CyberCognize inappropriately, please contact:
20. Third-Party Websites
Our website may contain links to Provider websites, learning platforms, certification bodies or other third-party services.
CyberCognize is not responsible for the privacy practices of independent third-party websites.
Customers should review the privacy policy of the relevant organisation when leaving CyberCognize's website or using a third-party service.
21. Privacy Complaints
If you have a question or complaint about how CyberCognize has handled your personal information, please contact us first so that we can investigate and respond.
Contact:
Privacy Enquiries
CyberCognize Pty Ltd
privacy@cybercognize.com
We will seek to respond to privacy complaints within a reasonable period.
Where applicable, you may also have the right to lodge a complaint with the relevant privacy or data-protection regulator.
In Australia, this may include the Office of the Australian Information Commissioner (OAIC) where the Privacy Act applies.
22. Changes to This Privacy Policy
CyberCognize may update this Privacy Policy from time to time to reflect changes to:
our business;
products and services;
Third-Party Training Providers;
website and ecommerce functionality;
Study Journal, CyberCognize Navigator and other CyberCognize applications;
technology systems;
international operations;
privacy practices; or
legal and regulatory requirements.
The latest version will be published on the CyberCognize website and the “Last updated” date will be revised accordingly.
23. Contact Us
For privacy questions, access or correction requests, complaints or other privacy enquiries, contact:
CyberCognize Pty Ltd
Suite 17, 89–97 Jones Street
Ultimo NSW 2007
Australia
Privacy: privacy@cybercognize.com
General enquiries: general@cybercognize.com
Accounts, payments, refunds and cancellations: accounts@cybercognize.com